platform/manifests
1
0
Fork 0
Code Issues 7 Pull Requests 6 Actions Packages Projects Releases Wiki Activity

fix: Add sorcerer queues

Browse Source
This commit is contained in:
Moritz Jörg
2026-03-30 12:28:54 +02:00
parent 9d979d5de3
commit 09ce53cdd6
2 changed files with 134 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
values/kueue/manifests/clusterQueue.yaml
+17
View File
@@ -54,6 +54,23 @@ metadata:
argocd.argoproj.io/sync-wave: "2" argocd.argoproj.io/sync-wave: "2"
spec: spec:
clusterQueue: cluster-queue clusterQueue: cluster-queue
---
apiVersion: v1
kind: Namespace
metadata:
name: prod-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
---
apiVersion: kueue.x-k8s.io/v1beta2
kind: LocalQueue
metadata:
name: prod-queue
namespace: prod-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
spec:
clusterQueue: cluster-queue
# --- # ---
# apiVersion: kueue.x-k8s.io/v1beta2 # apiVersion: kueue.x-k8s.io/v1beta2
# kind: WorkloadPriorityClass # kind: WorkloadPriorityClass
values/kueue/manifests/sorcerer-queue-access.yaml
+117
View File
@@ -0,0 +1,117 @@
# Cross-namespace RBAC: allow sorcerer ServiceAccounts to manage JobSets in dev-queue
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: beta-sorcerer-dev-queue
namespace: dev-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: beta-sorcerer-dev-queue
namespace: dev-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: beta-sorcerer-dev-queue
subjects:
- kind: ServiceAccount
name: beta-sorcerer
namespace: beta-sorcerer
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: prod-sorcerer-dev-queue
namespace: dev-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: prod-sorcerer-dev-queue
namespace: dev-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: prod-sorcerer-dev-queue
subjects:
- kind: ServiceAccount
name: prod-sorcerer
namespace: prod-sorcerer
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: staging-sorcerer-dev-queue
namespace: dev-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: staging-sorcerer-dev-queue
namespace: dev-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: staging-sorcerer-dev-queue
subjects:
- kind: ServiceAccount
name: staging-sorcerer
namespace: staging-sorcerer